Page 1 of 1

MUST read, TO Check for VIRUS (fwd)

Posted: Fri Dec 07, 2001 1:17 pm
by Tanya Marquette
Hi All,

Bad news. I received this post and checked for the virus on my machine--I had it. Please follow the instructions: they are simple and work easily. sorry about this

tanya
In a message dated 12/4/01 1:41:49 PM Eastern Standard Time, rf001i@mail.rochester.edu writes:

Dear friends,
I just got this email about a potential virus in my C drive, followed the instructions, found the program there, and deleted it before it caused a problem. Please take a sec and make sure you check yours and clear it out if it is there.

Pete
[Non-text portions of this message have been removed]

Re: MUST read, TO Check for VIRUS (fwd)

Posted: Fri Dec 07, 2001 2:11 pm
by Wendy Howard
> Bad news. I received this post and checked for the virus on my machine--I
had it. Please follow the instructions: they are simple and work easily.
sorry about this

Tanya

DON'T delete this file. This is a hoax that has been circulating since about
May. Sulfnbk.exe is a key Windows operating system file. If you delete it,
you're in for trouble.

Checkout http://www.snopes2.com/index.html the Urban Legends site before
following advice like this.

Regards
Wendy

Re: MUST read, TO Check for VIRUS (fwd)

Posted: Fri Dec 07, 2001 2:22 pm
by Wendy Howard
For Tanya and anyone else who's deleted their sulfnbk.exe file

This is from www.mcaffee.com

AVERT HOAX Notice!!

McAfee AVERT Labs would like to inform you of a new email HOAX.

This email message is just a HOAX. Although, the SULFNBK.EXE file may become
infected by a number of valid viruses (most commonly W32/Magistr@MM, the
details of this HOAX message are not based on actual events.

We are advising users who receive the email to delete the message and DO NOT
pass it on as this is how an email HOAX propagates.

SULFNBK.EXE is a Microsoft Windows utility that is used to restore long file
names.

In the event that SULFNBK.EXE was deleted erroneously, the following method
may be used to restore the file from backup:

-- Windows 98 Instructions --

1) Click START - RUN, type SFC and hit ENTER
2) In the "Specify the system file you would like to restore" field, type
C:\WINDOWS\COMMAND\SULFNBK.EXE and hit ENTER
3) In the RESTORE FROM field, type in the path to your WINDOWS CAB files
(ie. C:\WINDOWS\OPTIONS\CABS)
(ie. D:\WIN98 where D is the drive letter assigned to your CD-ROM)
4) Click OK and continue with the restore function

-- End Windows 98 Instructions --

-- Windows ME Instructions --

1) Click START - RUN, type MSCONFIG and hit ENTER
2) Click the Extract Files button
3) In the "Specify the system file you would like to restore" field, type
C:\WINDOWS\COMMAND\SULFNBK.EXE and hit ENTER
4) In the RESTORE FROM field, type in the path to your WINDOWS CAB files
(ie. C:\WINDOWS\OPTIONS\INSTALL)
5) Click OK and continue with the restore function

-- End Windows ME Instructions --

Regards
Wendy

Re: MUST read, TO Check for VIRUS (fwd)

Posted: Fri Dec 07, 2001 2:28 pm
by Soroush Ebrahimi
BE VERY CAREFUL

Check with a computer engineer.

We have had hoaxes like this before where they get you to delete essential
files yourself (effectively making you a virus!!)

Check first before you delete anything.
Best - use an anti virus prog. to check

Soroush

Re: MUST read, TO Check for VIRUS (fwd)

Posted: Fri Dec 07, 2001 4:38 pm
by nutra
I believe this is a hoax - that file is necessary for windows - if I remember right, it has to do with long file names. But it can be used by a virus - see below,

Here are some instructions regarding it

http://www.europe.f-secure.com/hoaxes/sulfnbk.shtml

Please ignore this hoax and don't pass it on.

It should be noted that Magistr virus-worm can choose SULFNBK.EXE file as its victim, infect it and send it out. So if you find this file attached to an e-mail message please delete it, never run the attachment.
Nina

Re: MUST read, TO Check for VIRUS (fwd)

Posted: Sat Dec 08, 2001 3:41 pm
by Chris_Gillen
Dear Wendy,

I followed the instructions to restore this file to C drive, and D drive
(Win 98) but since there was never any back up file (that I'm aware of)
from which to restore it, the instructions don't work. Any suggestions, or
know who I can ask?

Gratefully,
Chris